← Back to search

io.github.Rumblingb/agentpay-sentinel-mcp

Rumblingb Scanned 2d ago

Security guardrails for AI agent payments

MCP Registry ↗
B
75.5 / 100

Versions

1.0.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

sentinel_audit_transaction
annotations: none low

nonce string amount string category string token_id string allowlist string budget_cap string expires_at string token_hash string merchant_id string current_spend string approved_amount string calls_this_minute string blocked_categories string max_calls_per_minute string
sentinel_revoke_token
annotations: none low

reason string token_id string
sentinel_clear_nonce
annotations: none low

nonce string
sentinel_verify_chain
annotations: none low

audit_hashes string expected_chain_root string
sentinel_threat_model
annotations: none low

context string attack_vector string

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 29

low
Tool 'sentinel_audit_transaction' has no annotations annotation_checker · 100%
low
Tool 'sentinel_revoke_token' has no annotations annotation_checker · 100%
low
Tool 'sentinel_clear_nonce' has no annotations annotation_checker · 100%
low
Tool 'sentinel_verify_chain' has no annotations annotation_checker · 100%
low
Tool 'sentinel_threat_model' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: sentinel_audit_transaction manifest_parser · 90%
info
Tool: sentinel_revoke_token manifest_parser · 90%
info
Tool: sentinel_clear_nonce manifest_parser · 90%
info
Tool: sentinel_verify_chain manifest_parser · 90%
info
Tool: sentinel_threat_model manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%